Description
Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CRM Perks | Integration for Contact Form 7 and Constant Contact | ≤ 1.1.6 | — |
Critical · 9.8
CVE-2026-49106
EUVD-2026-36883GHSA-6jc2-r4qg-63mf
WordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack